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MEMO IN SUPPORT OF 
PRE-APPEAL BRIEF REQUEST FOR REVIEW 

In connection with the Notice of Appeal and Request for Pre^ Appeal Brief 
Request for Review, the following discussion is submitted to support the Request. 

Initially, claims 18 through 29 of the application will be considered. The 
rejection of the final Office Action did not specifically address the requirements of these 
claims, other than a single sentence appended to the text of the rejection of claim 17 that 
asserted that "[regarding claims 1 8-29, such particular features are well known in the art 
for the purpose of security". 

Firstly, the assertion of "well known in the art" was timely challenged in the 
response to the final Office Action, and the following discussion will focus on the 
distinctions between the requirements of the claims and the cited art It is submitted that 
the cited Burstein ands DRM documents do not disclose these features, and in some 
cases, the requirements of the claims are contrary to what is actually discussed in the 
documents. 

Secondly, the mere assertion that the features of claims 18 through 29 are "well 
known in the art for the purpose of security", even if it could be shown to be true, does 
not establish the non-patentability of the claims as it does not establish the "obviousness" 
of the combination of these allegedly "well known" with the cited Burstein and DRM 
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documents? The rej ection does not even assert that the combination of these allegedly 
"well-known" features with the cited Burstein and DRM documents is obvious. 

More specifically, consider claim 26, which requires that "the authenticating code 
is generated without user intervention 77 . This requirement is contrary to the discussion in 
the cited portion of the Burstein patent at col. 10, lines 24 through 37 that indicates the 
operator supplies the "authentication information" (all emphasis added): 

Referring to FIG. 2, a start screen generated by the front-end domain manager 
is illustrated. In this illustrative implementation, it is assumed that the operator 
accessing the domain manager is acting as an agent for a domain name registrant 
to modify some information about the domain name or perform another domain 
management function. Such a start screen preferably requests identification and 
authentication information from the operator to ensure that the agent is 
authorized to use the domain manager and to make changes for that domain. 

It is submitted that one of ordinary skill in the art , considering the Burstein patent would 
recognize that the operator provides the authentication information, and thus Burstein 
does not disclose that 44 "the authenticating code is generated without user intervention". 

Further, claim 27 requires that "the authentication code is generated by the 
computer system", which, for the reasons set forth above, is contrary to Burstein's 
requirement that the operator supply the "authentication information" to the domain 
manager of the Burstein system. 

Still further, claim 24 requires that "the authentication code generated is unique to 
the diagnostic code received", which is contrary to the discussion in Burstein patent that 
tells one of ordinary skill in the art that the "authentication information" of Burstein is 
assigned to the operator and the operator uses the same "authentication information" at 
each log in. This indicates that the Burstein system would always utilize the same 
"authentication information" for the operator so that the operator would always be 
recognized as "authoritative". This is contrary to the requirements o claim 24. 

Claim 25 requires that "a user is incapable of generating the authentication code", 
and it is submitted that the "identification and authentication information from the 
operator" relied upon in the rejection does not lead one of ordinary skill in the art to a 
code that a user is incapable of generating. 

Claim 23 requires that "the generating of the authentication code is performed 
after the receiving of the diagnostic code"> and this is in conflict with the discussion in 



PAGE 5/7 • RCVD AT 8/6/2008 6:15:12 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-6/29 " DNIS:2738300 * CS!D:605 232 2612 • DURATION (mm-ss):03-10 



08/06/08 17:23 FAX 605 232 2612 GATEWAY lg]006 



Burstein quoted above in which tfie~operator supplies the "authentication information" in 
order to log in to the Burstein system to perform any functions. Thus, the "authentication 
information" would be supplied by the operator prior to any receipt of a diagnostic code, 
rather than generating the authentication code after receiving the diagnostic code as 

required by claim 23. 

Claim 28 requires "requesting an authentication code by the computer system 
after receiving the diagnostic code" and claim 29 requires that "generating the 
authentication code is performed in response to receiving the diagnostic code", which is 
completely opposite of the apparent order of operations set forth in the Burstein patent, 
for the reasons set forth above with respect to claim 23. 

Claim 17 requires that "generating the authentication code comprises encoding a 
serial number into the authentication code". As noted above, the "authentication 
information" of the Burstein patent that is relied upon in the rejection is provided to and 
used by a particular operator to identify and authenticate him or her to the system, and it 
has not been established in the rejection why one of ordinary skill in the art would encode 
a serial number in an operator's authentication information, or why, as required by claim 
1 8, "a computer system serial number" would be encoded into the operator's 
"authentication information", or why, as required by claim 19, "a serial number for a 
hardware component of a computer system" would be encoded into the operator's 
"authentication information". 

The rejection further cites the Burstein patent at col. 14, line 61 through col. 15, 
line 67, but nothing there discloses the origin of the authentication information or that the 
authentication information is associated with a diagnostic code, or that any authenticating 
code is generated in response to the reception of a diagnostic code, or that the 
"authentication information" is unique to the diagnostic code. 

In summary, it is submitted that the rejection of claims 18 through 29 does not 
state a prima facie case of obviousness. 

As previously pointed out, the Burstein patent describes an authentication process 
that is performed and completed prior to any further communication. Note that Burstein 
says that "[o]nce logged in or otherwise authenticated through a screen like that 
illustrated in FIG. 2, [then] a screen such as that illustrated in FIG. 3 appears to prompt 



PACE 6(7 * RCVD AT 8/6r2008 6:15:12 PM [Eastern Daytight Time] * SVR:USPTO-EFXRF-6/29 * DNIS:2738300 * CSID:605 232 2612 » DURATION (mm-ss):03-10 



"» 



08/06/08 17:23 FAX 605 232 2612 



GATEWAY 



@]007 



for the domain name to be modified or managed by-ffie operator" (implied word ~ 
inserted). There is no suggestion that the authentication information that is received as a 
part of the initial authentication process is associated with anything that might be 
interpreted by one of ordinary skill in the art as a diagnostic code. Instead, the Burstein 
patent discusses encryption of the subsequent communications rather than any 
authentication associated with any diagnostic codes. It is therefore submitted that there is 
no association between the authentication process which occurs initially and 
independently of the further operations. 

It is submitted that Burstein does not disclose what it is alleged to disclose for the 
simple fact that Burstein discusses authentication information for a person ("operator" or 
"agent"), and not for anything meeting any of the alternatives discussed for a "diagnostic 
code", and clearly Burstein does not establish that the "authentication information'* 
provided by the operator is in any way "generat[ed], . . for the generated diagnostic code" 
as required by claims 1 , 9, and 1 5. 

Moreover, the language of the claims does not merely recite adjectives for the 
codes, but includes substantive requirements that do not appear to have been considered 
here. See, especially, claim 15 which requires "receiving a diagnostic code generated by 
a computer system for a component of the computer system", "generating an 
authentication code in response to receiving the diagnostic code", and "associating the 
authentication code with the diagnostic code." Clearly, the causal requirements set forth 
in claim 15 are not met by the allegedly obvious combination of DRM and Burstein. 

Withdrawal of the § 103(a) rejection of claims 1 through 29 is therefore 
respectfully requested. 
Respectfully submitted, 

GATEWAY, INC. 



Jeffrey A. Proehl (Reg. No. 35,987) 
Customer No. 24,333 
610 Gateway Dr., Y-04 
N. Sioux City, SD 57049 

Telephone (605) 846-2042 ext. 26809 (Lori Boulware - pat. assist.) 
Fax (605) 232-2612 
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